PT-2023-10008 · Oclc · Oclc-Research Oaicat

Ward Van Wanrooij · Publicado 2023-02-20 · Atualizado 2024-05-17 · CVE-2013-10019

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OCLC-Research OAICat version 1.5.61

Description A critical issue affects some unknown processing, leading to sql injection. The attack may be initiated remotely.

Recommendations For OCLC-Research OAICat version 1.5.61, upgrade to version 1.5.62 to address this issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2013-10019

Produtos afetados

Oclc-Research Oaicat

Referências · 8

• https://github.com/OCLC-Research/oaicat/commit/6cc65501869fa663bcd24a70b63f41f5cfe6b3e1 · Correção
• https://t.me/cibsecurity/58518 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2013-10019 · Nota de Segurança
• https://t.me/cvenotify/44674 · Publicação no Telegram
• https://vuldb.com/?ctiid.221489 · Nota
• https://oaicat.googlecode.com/files/oaicat-1.5.62.tar.gz · Correção
• https://vuldb.com/?id.221489 · Nota
• https://code.google.com/archive/p/oaicat/issues/7 · Aviso do Fabricante